Re: ps -W now showing STIME Dec 31

[Brian Inglis <Brian dot Inglis at SystematicSw dot ab dot ca>]

On 2019-03-21 08:52, Corinna Vinschen wrote:
> On Mar 21 08:07, Brian Inglis wrote:
>> With latest Cygwin ps -W is now showing STIME Dec 31 for Windows startup
>> processes - these should be limited to actual start or uptime if possible.
> It's not possible.  Starttime requires ability to open process.

Everything on Cygwin updated Mar 18.
Running ps under bash from mintty launched from XDG.
Ran cygcheck on ps below, and attached strace not showing much useful.
Running under gdb, ps appears never to call GetProcessTimes on startup processes
including my own startup scheduled tasks, so start_time is always zero, and is
offset -7 to MST.
Showing below also unique startup programs, unique other programs with normal
times from System32, running Cygwin processes, and installed releases FYI.
I could rebuild ps with debugging and add logging if not reproducible.

$ cygcheck ps
Found: C:\...\cygwin64\bin\ps.exe
C:\...\cygwin64\bin\ps.exe
  C:\...\cygwin64\bin\cygwin1.dll
    C:\WINDOWS\system32\KERNEL32.dll
      C:\WINDOWS\system32\ntdll.dll
      C:\WINDOWS\system32\KERNELBASE.dll
      C:\WINDOWS\system32\api-ms-win-core-processthreads-l1-1-1.dll
      C:\WINDOWS\system32\api-ms-win-core-synch-l1-2-0.dll
      C:\WINDOWS\system32\api-ms-win-core-file-l1-2-0.dll
      C:\WINDOWS\system32\api-ms-win-core-timezone-l1-1-0.dll
      C:\WINDOWS\system32\api-ms-win-core-localization-l1-2-0.dll
      C:\WINDOWS\system32\api-ms-win-core-file-l2-1-0.dll
      C:\WINDOWS\system32\api-ms-win-core-xstate-l2-1-0.dll
  C:\WINDOWS\system32\ADVAPI32.dll
    C:\WINDOWS\system32\msvcrt.dll:
    C:\WINDOWS\system32\SECHOST.dll
      C:\WINDOWS\system32\RPCRT4.dll
$ ps -Ws | fgrep Dec\ 31 | sort -u -k2,5
  68404 ?          Dec 31 C:\Program
Files\OpenHardwareMonitor\OpenHardwareMonitor.exe
  70348 ?          Dec 31 C:\ProgramData\Microsoft\Windows
Defender\Platform\4.18.1902.2-0\MsMpEng.exe
  69732 ?          Dec 31
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
  75044 ?          Dec 31 C:\Windows\servicing\TrustedInstaller.exe
  67220 ?          Dec 31 C:\Windows\System32\atiesrxx.exe
  69240 ?          Dec 31 C:\Windows\System32\conhost.exe
  66096 ?          Dec 31 C:\Windows\System32\csrss.exe
  67280 ?          Dec 31 C:\Windows\System32\dasHost.exe
  72692 ?          Dec 31 C:\Windows\System32\dwm.exe
  69092 ?          Dec 31 C:\Windows\System32\escsvc64.exe
  66512 ?          Dec 31 C:\Windows\System32\fontdrvhost.exe
  69436 ?          Dec 31 C:\Windows\System32\ibtsiva.exe
  66360 ?          Dec 31 C:\Windows\System32\lsass.exe
  70252 ?          Dec 31 C:\Windows\System32\mqsvc.exe
  72976 ?          Dec 31 C:\Windows\System32\SearchFilterHost.exe
  67528 ?          Dec 31 C:\Windows\System32\SearchIndexer.exe
  77244 ?          Dec 31 C:\Windows\System32\SearchProtocolHost.exe
  70304 ?          Dec 31 C:\Windows\System32\SecurityHealthService.exe
  66316 ?          Dec 31 C:\Windows\System32\services.exe
  67188 ?          Dec 31 C:\Windows\System32\SgrmBroker.exe
  65944 ?          Dec 31 C:\Windows\System32\smss.exe
  69940 ?          Dec 31 C:\Windows\System32\snmp.exe
  69160 ?          Dec 31 C:\Windows\System32\spoolsv.exe
  66464 ?          Dec 31 C:\Windows\System32\svchost.exe
  69112 ?          Dec 31 C:\Windows\System32\wbem\WmiPrvSE.exe
  66196 ?          Dec 31 C:\Windows\System32\wininit.exe
  70808 ?          Dec 31 C:\Windows\System32\winlogon.exe
  69232 ?          Dec 31 C:\Windows\System32\wlanext.exe
  67180 ?          Dec 31 C:\Windows\System32\WUDFHost.exe
  74244 ?          Dec 31
C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17763.164_none_7e114a3d4d0589d4\TiWorker.exe
  67696 ?          Dec 31 MemCompression
  65640 ?          Dec 31 Registry
  65540 ?          Dec 31 System
$ ps -Ws | fgrep -v Dec\ 31 | fgrep System32 | sort -u -k4
  71732 ?        20:10:39 C:\Windows\System32\CompPkgSrv.exe
  73416 ?        19:36:34 C:\Windows\System32\conhost.exe
  70468 ?        19:36:07 C:\Windows\System32\ctfmon.exe
  74748 ?        19:36:07 C:\Windows\System32\RuntimeBroker.exe
  71720 ?        19:36:18 C:\Windows\System32\SecurityHealthSystray.exe
  67476 ?        19:36:03 C:\Windows\System32\sihost.exe
  75028 ?        19:36:18 C:\Windows\System32\smartscreen.exe
  73996 ?        19:36:20 C:\Windows\System32\spool\drivers\x64\3\E_YATIQFE.EXE
  73676 ?        19:36:03 C:\Windows\System32\svchost.exe
  73368 ?        19:36:03 C:\Windows\System32\taskhostw.exe
$ ps -aef
     UID     PID    PPID  TTY        STIME COMMAND
  SYSTEM    3405    3404 ?          Mar 18 /usr/libexec/sendmail
  SYSTEM    3404       1 ?          Mar 18 /usr/bin/cygrunsrv
  SYSTEM    3376    3374 ?          Mar 18 /usr/sbin/syslog-ng
  SYSTEM    3374       1 ?          Mar 18 /usr/bin/cygrunsrv
  SYSTEM    3398       1 ?          Mar 18 /usr/bin/cygrunsrv
   $USER   52471   52448 ?        19:37:26 /usr/bin/fbxkb
   $USER   52494       1 ?        19:37:32 /usr/libexec/gvfsd
   $USER   52341       1 cons0    19:36:34 /usr/bin/sh
   $USER   52459       1 ?        19:37:22 /usr/bin/dbus-daemon
   $USER   52458       1 ?        19:37:22 /usr/bin/dbus-launch
  SYSTEM    3399    3398 ?          Mar 18 /usr/sbin/cron
   $USER   52474   52473 pty0     19:37:28 /usr/bin/bash
   $USER   52445   52444 cons0    19:37:10 /usr/bin/XWin
   $USER   52463       1 ?        19:37:25 /usr/bin/gnome-keyring-daemon
  SYSTEM    3393    3392 ?          Mar 18 /usr/sbin/cygserver
   $USER   52444   52341 cons0    19:37:10 /usr/bin/xinit
   $USER    1115   52474 pty0     09:18:33 /usr/bin/bash
   $USER   64883       1 ?        08:14:52 /usr/bin/dbus-daemon
   $USER   52515       1 ?        19:37:35 /usr/libexec/gam_server
   $USER   52448   52444 ?        19:37:19 /usr/bin/xwin-xdg-menu
  SYSTEM    3392       1 ?          Mar 18 /usr/bin/cygrunsrv
   $USER   52473       1 ?        19:37:27 /usr/bin/mintty
   $USER    1114   52474 pty0     09:18:33 /usr/bin/ps
$ apt list cygwin
base-cygwin 3.8-1 x86_64 [installed, automatic]
cygwin 3.0.4-1 x86_64 [installed, automatic]
cygwin-debuginfo 3.0.4-1 x86_64 [installed, manual]
cygwin-devel 3.0.4-1 x86_64 [installed, automatic]
cygwin-doc 3.0.4-1 x86_64 [installed, manual]
...

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

This email may be disturbing to some readers as it contains
too much technical detail. Reader discretion is advised.

Attachment: ps.strace
Description: Text document

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple